From 1b01df3821555db754f8664aa6572fe32e55c062 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 26 Oct 2018 03:20:36 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:deep-extend:20180409 - https://snyk.io/vuln/npm:tunnel-agent:20170305 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:tunnel-agent:20170305 --- .snyk | 16 ++++++++++++++++ package.json | 12 ++++++++---- 2 files changed, 24 insertions(+), 4 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..50aaecc --- /dev/null +++ b/.snyk @@ -0,0 +1,16 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.12.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:tunnel-agent:20170305': + - imagemin-gifsicle > gifsicle > bin-build > download > caw > tunnel-agent: + patched: '2018-10-26T03:20:34.585Z' + - imagemin-mozjpeg > mozjpeg > bin-build > download > caw > tunnel-agent: + patched: '2018-10-26T03:20:34.585Z' + - imagemin-gifsicle > gifsicle > bin-wrapper > download > caw > tunnel-agent: + patched: '2018-10-26T03:20:34.585Z' + - imagemin-mozjpeg > mozjpeg > bin-wrapper > download > caw > tunnel-agent: + patched: '2018-10-26T03:20:34.585Z' + - imagemin-pngquant > pngquant-bin > bin-wrapper > download > caw > tunnel-agent: + patched: '2018-10-26T03:20:34.585Z' diff --git a/package.json b/package.json index 48f4c48..15ed19b 100644 --- a/package.json +++ b/package.json @@ -23,7 +23,9 @@ "test": "npm run lint", "lint": "standard --verbose", "lint:fix": "standard --fix --verbose", - "precommit": "npm test" + "precommit": "npm test", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "keywords": [ "minify", @@ -46,14 +48,16 @@ "imagemin": "^5.3.1", "imagemin-gifsicle": "^5.1.0", "imagemin-mozjpeg": "^6.0.0", - "imagemin-pngquant": "^5.0.0", + "imagemin-pngquant": "^5.1.0", "imagemin-svgo": "^5.2.1", "node-dir": "^0.1.16", "purify-css": "^1.1.9", - "uglify-js": "^3.0.4" + "uglify-js": "^3.0.4", + "snyk": "^1.105.0" }, "devDependencies": { "husky": "^0.13.3", "standard": "^10.0.1" - } + }, + "snyk": true }